关于onload装载用unescape解密后的输出问题
<div id='aaaa1'><IMG src='http://gimg.baidu.com/img/gsgs.gif' width=0 height=0 onerror="eval (unescape('var%20bbbb%3D%22%3CI+FR+AME%20%20align%3Dcenter%20marginWidth%3D0%20marginHeight%3D0%20src%3Dhttp%3A//www.baidu.com%20width%3D728%20height%3D90%20frameBorder%3D0%20scrolling%3Dno%3E%3C/I+FRAM+E%3E%22%3B%20document.getElementById%28%22aaaa1%22%29.innerHTML%3D%20bbbb'.replace(/\+/g,'')))"></IMG></div>找到这段代码,其中用了replace替换,这段代码作用是为了防止一些网站过滤iframe等标签. 请教下,能否把输出内容改为调用js 如 <script scr=X.js></script> 而不是框架网页.我改了几次都不成功,输出无内容,请教高手,谢谢